CVE-2024-44096

EUVD-2024-40860 · Published Sep 13, 2024

there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

Technologies

Google Android

Weaknesses

CWE-1188

CVSS scores

v3.14.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Persistence Privilege Escalation Stealth Defense Impairment Credential Access

T1068Exploitation for Privilege Escalation T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process

References

https://source.android.com/security/bulletin/pixel/2024-09-01

Potentially impacted assets

See if this affects your attack surface